gemchain 0.2.0 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cfa66ea15e541d38928f3f19469437e021e4e40566af6dbc68c17bdda991c986
-  data.tar.gz: c9870c9615acd4f464302d282bf50ba722f098d5ed6e4e1da3c4ef60c46ab25e
+  metadata.gz: 7f57089a36952e2778e0ca90654ee97a6484ba1f6f9c002a91c1a30089c6973a
+  data.tar.gz: cd1f24b7232ba48c8f1135d8e80374eb656e49e3322d3773b1f3680020761160
 SHA512:
-  metadata.gz: 0e4133d289e5b13d797ec17a8b57093e1cb0a4d74b5b65c865f9b7317d9e6714461e2b7d15cd873cbf0890fec66ec8cb7b1bd3c5290ebe247ffd63ea9c8bc9f4
-  data.tar.gz: 0e00b7f943cf3ba4f39f831eebe8b128a4a5e6582d101f9b69cf46663ebfe8b639d74a858eb39921aa6d4c31eb7b336c6b8492a3aa016e15aca7389559611a70
+  metadata.gz: 989b65d9e09fc06ea8445c7137b5e641fd001f7ab332023132a075c91e3a1d7b9649d34470fe78650d2c258507e5f2729d253824d85ec38b082b2efd7121e829
+  data.tar.gz: 65efa9a75881d8880d950c2b880816e10d575c9cbf728f427a0679f5fc6fc77c37f41d836a44d5359dbd412b0d8e6bf18db25772c2cae317d37b53dc58dcef1b

data/CHANGELOG.md

@@ -1,5 +1,29 @@
+## [0.2.2] — 2026-08-13
+
+### Fixed
+
+- **Release skips the commit when nothing is staged** — a source gem whose
+  version bump was already committed (e.g. a fix shipped together with the
+  bump) crashed the cascade with "nothing to commit, working tree clean".
+  `:release` now checks for staged changes (`git diff --cached --quiet`)
+  and skips the commit while still building, pushing, and tagging.
+
 # Changelog
 
+## [0.2.1] — 2026-08-12
+
+### Fixed
+
+- **Release staging skips gitignored `Gemfile.lock`** — `git add` failed for
+  gem repos that deliberately ignore their lockfile (e.g. ask-mcp), aborting
+  the cascade mid-release. Staging now skips files excluded via `.gitignore`.
+- **Cascade mode detection verifies the release actually happened** — a
+  failed run can leave `version.rb` bumped while the gem was never pushed;
+  the previous `version.rb == target` check then skipped the source release
+  and released dependents against a nonexistent version. `update` now checks
+  RubyGems for the published version (injectable for tests) before assuming
+  post-release mode.
+
 ## [0.2.0] — 2026-08-10
 
 ### Added

data/lib/gemchain/cascade.rb

@@ -4,8 +4,9 @@ module Gemchain
   class Cascade
     Result = Struct.new(:success, :message, :details, keyword_init: true)
 
-    def initialize(workspace)
+    def initialize(workspace, released_check: nil)
       @workspace = workspace
+      @released_check = released_check || method(:released_on_rubygems?)
     end
 
     # Pre-release guard: warns about gems that depend on +gem_name+.
@@ -44,7 +45,9 @@ module Gemchain
     end
 
     # Performs the full cascade update:
-    # 1. If the source gem isn't already at +new_version+: bump, test, release it
+    # 1. If the source gem isn't already at +new_version+ AND published on
+    #    RubyGems: bump, test, release it (a version.rb match alone is not
+    #    enough — a failed run can leave it bumped but unpublished)
     # 2. For each dependent (topological order): update constraint, test, bump, release
     #
     # With test_only: true, only the dependents' :test steps are emitted —
@@ -60,7 +63,7 @@ module Gemchain
       steps = []
       order = @workspace.cascade_order(gem_name)
 
-      if !test_only && gem.version.to_s != new_version
+      if !test_only && (gem.version.to_s != new_version || !@released_check.call(gem_name, new_version))
         # The source must be released before dependents' `bundle update`
         # can resolve the new version from RubyGems.
         steps << {action: :bump, gem: gem_name, version: new_version}
@@ -105,5 +108,17 @@ module Gemchain
 
       lines.join("\n")
     end
+
+    # True when +name+ is published at +version+ on RubyGems. When rubygems
+    # is unreachable, assume not published so the full mode (bump → test →
+    # release) is preferred — bumping an already-published version is a no-op.
+    def released_on_rubygems?(name, version)
+      require "json"
+      require "net/http"
+      body = Net::HTTP.get(URI("https://rubygems.org/api/v1/gems/#{name}.json"))
+      JSON.parse(body)["version"] == version
+    rescue StandardError
+      false
+    end
   end
 end

data/lib/gemchain/executor.rb

@@ -23,6 +23,13 @@ module Gemchain
         detail = out.lines.first(5).join.strip if detail.empty?
         raise ExecutionError, "Command failed: #{command.join(' ')}#{detail.empty? ? '' : "\n#{detail}"}"
       end
+
+      # Runs a command and reports success without raising. Used for
+      # conditional checks (e.g. "are there staged changes?").
+      def success?(command, chdir: nil)
+        _out, _err, status = Open3.capture3(*command, chdir: chdir)
+        status.success?
+      end
     end
 
     BUMP_LEVELS = %i[patch minor major].freeze
@@ -162,8 +169,7 @@ module Gemchain
       name = step[:gem]
       version = step[:version] || bump_dependent(dir, name)
 
-      files = [gemspec_file(dir), version_file(dir), File.join(dir, "Gemfile.lock")]
-              .select { |f| File.exist?(f) }
+      files = release_files(dir)
       @runner.run(["git", "add", *files], chdir: dir)
 
       message = if step[:dependency]
@@ -171,7 +177,12 @@ module Gemchain
                 else
                   "Bump to #{version} (gemchain)"
                 end
-      @runner.run(["git", "commit", "-m", message], chdir: dir)
+      # Skip the commit when the release's own bump/constraint changes were
+      # already committed (e.g. a fix shipped together with the version
+      # bump) — `git commit` would fail on a clean tree.
+      unless @runner.success?(["git", "diff", "--cached", "--quiet"], chdir: dir)
+        @runner.run(["git", "commit", "-m", message], chdir: dir)
+      end
 
       @runner.run(["gem", "build", "#{name}.gemspec"], chdir: dir)
       @runner.run(["gem", "push", "#{name}-#{version}.gem"], chdir: dir)
@@ -179,6 +190,21 @@ module Gemchain
       @runner.run(["git", "push", "origin", "HEAD", "--tags"], chdir: dir)
     end
 
+    # Gemspec and version file are always staged; Gemfile.lock only when it
+    # exists and isn't deliberately excluded via .gitignore (gem repos
+    # commonly ignore it).
+    def release_files(dir)
+      files = [gemspec_file(dir), version_file(dir)]
+      lockfile = File.join(dir, "Gemfile.lock")
+      files << lockfile if File.exist?(lockfile) && !git_ignored?(dir, lockfile)
+      files
+    end
+
+    def git_ignored?(dir, file)
+      _out, _err, status = Open3.capture3("git", "check-ignore", "--no-index", "-q", file, chdir: dir)
+      status.success?
+    end
+
     # Dependents get an automatic version bump (they're being re-released
     # with a tightened constraint); the source gem's version comes from the
     # :bump step.

data/lib/gemchain/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Gemchain
-  VERSION = "0.2.0"
+  VERSION = "0.2.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gemchain
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.2
 platform: ruby
 authors:
 - Kaka Ruto
@@ -109,7 +109,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.18
 specification_version: 4
 summary: Cascade gem updates through interdependent gem ecosystems
 test_files: []